Static task
static1
Behavioral task
behavioral1
Sample
fabedc9e48601918771d0b3421844c816c4948d93d114e35a1bb55409b474b03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fabedc9e48601918771d0b3421844c816c4948d93d114e35a1bb55409b474b03.exe
Resource
win10v2004-20220812-en
General
-
Target
fabedc9e48601918771d0b3421844c816c4948d93d114e35a1bb55409b474b03
-
Size
650KB
-
MD5
056da4230097f2510d498780e3251239
-
SHA1
ceb5c429f816a561d41f1bba2aa15a9b92c527e6
-
SHA256
fabedc9e48601918771d0b3421844c816c4948d93d114e35a1bb55409b474b03
-
SHA512
31b92269422e41df854791cd11b0b85936b5099c7744f32f751935b6d9b45e1dae057fafa338306326596ce4fd3319e5811b53bc7b1dcd5606fc3b644031bce1
-
SSDEEP
12288:mEtDt+QFAYvL7+3uhyMNfAsLfozPCOZ/5hNeGX9UZPTjOpMZaBY/x4b7GEtDt+Q:LTdvvdBfAXTBhqt4MZaB3rT
Malware Config
Signatures
Files
-
fabedc9e48601918771d0b3421844c816c4948d93d114e35a1bb55409b474b03.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 553KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE